Merge pull request #18 from romul/csrf

Added csrf meta tags to cached pages.
Set guest token only in case when user calls orders controller